VYPR

CVEs

346,028 total · page 6059 of 6,921

AllCriticalHighKEV
  • CVE-2010-3211Sep 3, 2010
    Joomla
    JE FAQ Pro
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in the JE FAQ Pro (com_jefaqpro) component 1.5.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via category categorylist operations with (1) the catid parameter or (2) the catid parameter in a lists action.

  • CVE-2010-3210Sep 3, 2010
    Multi Lingual E Commerce System
    Multi-lingual E-Commerce System
    risk 0.03cvss —epss 0.02

    Multiple PHP remote file inclusion vulnerabilities in Multi-lingual E-Commerce System 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the include_path parameter to (1) checkout2-CYM.php, (2) checkout2-EN.php, (3) checkout2-FR.php, (4) cat-FR.php, (5)…

  • CVE-2010-3209Sep 3, 2010
    Seagull
    Seagull
    risk 0.03cvss —epss 0.02

    Multiple PHP remote file inclusion vulnerabilities in Seagull 0.6.7 allow remote attackers to execute arbitrary PHP code via a URL in the includeFile parameter to (1) Config/Container.php and (2) HTML/QuickForm.php in fog/lib/pear/, the (3) driverpath parameter to…

  • CVE-2010-3208Sep 3, 2010
    Wiccle
    Wiccle Web Builder
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in ajax.php in Wiccle Web Builder (WWB) 1.00 and 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the post_text parameter in a site custom_search action to index.php. NOTE: some of these details are obtained from…

  • CVE-2010-3207Sep 3, 2010
    Galeriashqip
    Galeriashqip
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in GaleriaSHQIP 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the album_id parameter. NOTE: some of these details are obtained from third party information.

  • CVE-2010-3206Sep 3, 2010
    Diy CMS
    Diy CMS
    risk 0.03cvss —epss 0.02

    Multiple PHP remote file inclusion vulnerabilities in DiY-CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) lang parameter to modules/guestbook/blocks/control.block.php, (2) main_module parameter to index.php, and (3) getFile parameter to…

  • CVE-2010-3205Sep 3, 2010
    Textpattern
    Textpattern
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in index.php in Textpattern CMS 4.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter.

  • CVE-2010-3204Sep 3, 2010
    Pecio CMS
    Pecio CMS
    risk 0.03cvss —epss 0.02

    Multiple PHP remote file inclusion vulnerabilities in Pecio CMS 2.0.5 allow remote attackers to execute arbitrary PHP code via a URL in the template parameter to (1) post.php, (2) article.php, (3) blog.php, or (4) home.php in pec_templates/nova-blue/.

  • CVE-2010-3203Sep 3, 2010
    Joomla
    PicSell
    risk 0.04cvss —epss 0.09

    Directory traversal vulnerability in the PicSell (com_picsell) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the dflink parameter in a prevsell dwnfree action to index.php.

  • CVE-2010-3197Aug 31, 2010
    IBM
    Db2
    risk 0.00cvss —epss 0.02

    IBM DB2 9.7 before FP2 does not perform the expected access control on the monitor administrative views in the SYSIBMADM schema, which allows remote attackers to obtain sensitive information via unspecified vectors.

  • CVE-2010-3196Aug 31, 2010
    IBM
    Db2
    risk 0.00cvss —epss 0.01

    IBM DB2 9.7 before FP2, when AUTO_REVAL is IMMEDIATE, allows remote authenticated users to cause a denial of service (loss of privileges) to a view owner by defining a dependent view.

  • CVE-2010-3195Aug 31, 2010
    IBM
    Db2
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 on Windows Server 2008 allows attackers to cause a denial of service (trap) via vectors involving "special group and user enumeration."

  • CVE-2010-3194Aug 31, 2010
    IBM
    Db2
    risk 0.00cvss —epss 0.02

    The DB2DART program in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows attackers to bypass intended file access restrictions via unspecified vectors related to overwriting files owned by an instance owner.

  • CVE-2010-3193Aug 31, 2010
    IBM
    Db2
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the DB2STST program in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 has unknown impact and attack vectors.

  • CVE-2010-2365Aug 31, 2010
    Common1
    Moobbs2
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Free CGI Moo moobbs2 before 1.03 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-2364Aug 31, 2010
    Common1
    Moobbs
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Free CGI Moo moobbs before 1.03 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-3191Aug 31, 2010
    Adobe Inc.
    Captivate
    risk 0.00cvss —epss 0.06

    Untrusted search path vulnerability in Adobe Captivate 5.0.0.596, and possibly other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a…

  • CVE-2010-3190HigAug 31, 2010
    Microsoft
    Visual Studio
    risk 0.51cvss 7.8epss 0.09

    Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C++ 2005 SP1, 2008 SP1, and 2010; and Exchange Server 2010 Service Pack 3, 2013, and 2013 allows local…

  • CVE-2010-3189Aug 31, 2010
    Trend Micro
    Internet Security
    risk 0.06cvss —epss 0.39

    The extSetOwner function in the UfProxyBrowserCtrl ActiveX control (UfPBCtrl.dll) in Trend Micro Internet Security Pro 2010 allows remote attackers to execute arbitrary code via an invalid address that is dereferenced as a pointer.

  • CVE-2010-3188Aug 31, 2010
    Ifdefined
    BugTracker.NET
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in search.aspx in BugTracker.NET 3.4.3 and earlier allows remote attackers to execute arbitrary SQL commands via a custom field to the search page.

  • CVE-2010-1818Aug 31, 2010
    Apple Inc.
    Quicktime
    risk 0.06cvss —epss 0.43

    The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the _Marshaled_pUnk attribute, which triggers unmarshalling of an untrusted pointer.

  • CVE-2010-3035HigKEVAug 30, 2010
    Cisco Systems, Inc.
    iOS Xr
    risk 0.61cvss 7.5epss 0.06

    Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with…

  • CVE-2010-2712Aug 30, 2010
    Microfocus
    Hpux
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Software Distributor (sd) in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors.

  • CVE-2010-2575Aug 30, 2010
    KDE
    Kde
    risk 0.00cvss —epss 0.05

    Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service (application crash) or possibly execute…

  • CVE-2010-3187Aug 30, 2010
    IBM
    Aix
    risk 0.05cvss —epss 0.20

    Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to execute arbitrary code via a long NLST command.

  • CVE-2010-3186Aug 30, 2010
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.03

    IBM WebSphere Application Server (WAS) 7.x before 7.0.0.13, and WebSphere Application Server Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, when a JAX-WS application is used, does not properly handle an IncludeTimestamp setting in the WS-Security policy, which has…

  • CVE-2010-3002Aug 30, 2010
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in RealNetworks RealPlayer 11.0 through 11.1 allows attackers to bypass intended access restrictions on files via unknown vectors.

  • CVE-2010-3001Aug 30, 2010
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in an ActiveX control in the Internet Explorer (IE) plugin in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows has unknown impact and attack vectors related to "multiple browser windows."

  • CVE-2010-3000Aug 30, 2010
    RealNetworks
    Realplayer
    risk 0.04cvss —epss 0.07

    Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allow remote attackers to execute arbitrary code via crafted (1) HX_FLV_META_AMF_TYPE_MIXEDARRAY or (2)…

  • CVE-2010-2996Aug 30, 2010
    RealNetworks
    Realplayer
    risk 0.01cvss —epss 0.07

    Array index error in RealNetworks RealPlayer 11.0 through 11.1 on Windows allows remote attackers to execute arbitrary code via a malformed header in a RealMedia .IVR file.

  • CVE-2010-2945Aug 30, 2010
    Slims
    Slim
    risk 0.00cvss —epss 0.00

    The default configuration of SLiM before 1.3.2 places ./ (dot slash) at the beginning of the default_path option, which might allow local users to gain privileges via a Trojan horse program in the current working directory, related to slim.conf and cfg.cpp.

  • CVE-2010-2940Aug 30, 2010
    Fedoraproject
    Sssd
    risk 0.00cvss —epss 0.02

    The auth_send function in providers/ldap/ldap_auth.c in System Security Services Daemon (SSSD) 1.3.0, when LDAP authentication and anonymous bind are enabled, allows remote attackers to bypass the authentication requirements of pam_authenticate via an empty password.

  • CVE-2010-2794Aug 30, 2010
    Red Hat
    Spice Xpi
    risk 0.00cvss —epss 0.00

    The SPICE (aka spice-xpi) plug-in 2.2 for Firefox allows local users to overwrite arbitrary files via a symlink attack on an unspecified log file.

  • CVE-2010-2792Aug 30, 2010
    Red Hat
    Qspice
    risk 0.00cvss —epss 0.00

    Race condition in the SPICE (aka spice-xpi) plug-in 2.2 for Firefox allows local users to obtain sensitive information, and conduct man-in-the-middle attacks, by providing a UNIX socket for communication between this plug-in and the client (aka qspice-client) in qspice 0.3.0,…

  • CVE-2010-2363Aug 30, 2010
    Seil
    SEIL/X
    risk 0.00cvss —epss 0.02

    The IPv6 Unicast Reverse Path Forwarding (RPF) implementation on the SEIL/X1, SEIL/X2, and SEIL/B1 routers with firmware 1.00 through 2.73, when strict mode is used, does not properly drop packets, which might allow remote attackers to bypass intended access restrictions via a…

  • CVE-2010-0120Aug 30, 2010
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.06

    Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allows remote attackers to execute arbitrary code via large size values in QCP audio content.

  • CVE-2010-0117Aug 30, 2010
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.05

    RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows do not properly handle dimensions during YUV420 transformations, which might allow remote attackers to execute arbitrary code via crafted MP4 content.

  • CVE-2010-0116Aug 30, 2010
    RealNetworks
    Realplayer
    risk 0.00cvss —epss 0.06

    Integer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows might allow remote attackers to execute arbitrary code via a crafted QCP file that triggers a heap-based buffer overflow.

  • CVE-2010-3155Aug 27, 2010
    Adobe Inc.
    ExtendScript Toolkit
    risk 0.04cvss —epss 0.12

    Untrusted search path vulnerability in Adobe ExtendScript Toolkit (ESTK) CS5 3.5.0.52 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .jsx file.

  • CVE-2010-3154Aug 27, 2010
    Adobe Inc.
    Extension Manager Cs5
    risk 0.04cvss —epss 0.11

    Untrusted search path vulnerability in Adobe Extension Manager CS5 5.0.298 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .mxi or .mxp file.

  • CVE-2010-3153Aug 27, 2010
    Adobe Inc.
    Indesign
    risk 0.04cvss —epss 0.14

    Untrusted search path vulnerability in Adobe InDesign CS4 6.0, InDesign CS5 7.0.2 and earlier, Adobe InDesign Server CS5 7.0.2 and earlier, and Adobe InCopy CS5 7.0.2 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL…

  • CVE-2010-3152Aug 27, 2010
    Adobe Inc.
    Illustrator
    risk 0.04cvss —epss 0.17

    Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or aires.dll that…

  • CVE-2010-3151Aug 27, 2010
    Adobe Inc.
    Onlocation Cs4
    risk 0.04cvss —epss 0.15

    Untrusted search path vulnerability in Adobe On Location CS4 Build 315 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ibfs32.dll that is located in the same folder as an OLPROJ file.

  • CVE-2010-3150Aug 27, 2010
    Adobe Inc.
    Premier Pro Cs4
    risk 0.04cvss —epss 0.15

    Untrusted search path vulnerability in Adobe Premier Pro CS4 4.0.0 (314 (MC: 160820)) allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ibfs32.dll that is located in the same folder as a .pproj,…

  • CVE-2010-3149Aug 27, 2010
    Adobe Inc.
    Device Central Cs4
    risk 0.04cvss —epss 0.14

    Untrusted search path vulnerability in Adobe Device Central CS5 3.0.0(376), 3.0.1.0 (3027), and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse qtcf.dll that is located in…

  • CVE-2010-3148Aug 27, 2010
    Microsoft
    Visio
    risk 0.04cvss —epss 0.14

    Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .vsd, .vdx, .vst, or .vtx file, aka "Microsoft Visio…

  • CVE-2010-3147Aug 27, 2010
    Microsoft
    Windows
    risk 0.04cvss —epss 0.19

    Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a Trojan…

  • CVE-2010-3146Aug 27, 2010
    Microsoft
    Groove
    risk 0.04cvss —epss 0.14

    Multiple untrusted search path vulnerabilities in Microsoft Groove 2007 SP2 allow local users to gain privileges via a Trojan horse (1) mso.dll or (2) GroovePerfmon.dll file in the current working directory, as demonstrated by a directory that contains a Groove vCard (.vcg) or…

  • CVE-2010-3145Aug 27, 2010
    Microsoft
    Windows
    risk 0.04cvss —epss 0.11

    Untrusted search path vulnerability in the BitLocker Drive Encryption API, as used in sdclt.exe in Backup Manager in Microsoft Windows Vista SP1 and SP2, allows local users to gain privileges via a Trojan horse fveapi.dll file in the current working directory, as demonstrated by…

  • CVE-2010-3144Aug 27, 2010
    Microsoft
    Windows Xp
    risk 0.04cvss —epss 0.14

    Untrusted search path vulnerability in the Internet Connection Signup Wizard in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse smmscrpt.dll file in the current working directory, as demonstrated by a directory that…